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recover data pertaining to a particular application is 
refused access to this data. Indeed, t The bits of the 
state register in this case are different from the bits 
that might correspond to a call instruction DCALL of 

5 the particular application in question. 

The addresses which iL is sought to _be 
accessed and the bits of the register R T sent by the 
microprocessor by means of the via, link 230— are 
compared with each other in the access controller of 
10 access to the memory 220. Should iL be the case that If: 
the addresses of the memory that it is sought to t o be 
accessed are not addresses belonging to the authorized 
field of the last application having performed a call, 
instruction DCALL Lype call , then a piece of 

15 information on illegal access prohibits acce ss to these 
memories to the memory is prohibited . 

The device according to the invention thus 
provides great security in the sense that data elements 
Jestined intended for one application cannot be used by 

20 another application. 

A second register CS makes it possible to 

retain in memory a code proper to the applications that 
were active at the last call instruction DCALL sent by 
the current application, namely those that are to be 

25 performed following the current application. 

When the current application has finished 
hftina executed completed execution , a return instruction 
DRET is executed by the microprocessor and the data 
elements contained in the second register CS enable a 

30 return to the application that was being performed 

previously and had been activated by a call instruction 
DCALL. The register R is also updated. 

The second register CS cannot be directly 
accessed by the applications of the chip card. This is 

35 in order to ensure the integrity of the device when it 
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is put into operation during the execution of a return 
instruction DRET . 

When the execution of the current 

application is finished, the bits of the register R 
5 assume a value specific to the application that was 
being performed previously, restoring its rights and 
limits in terms of memory access. 

The memory zone access device according to 

the invention gives a high level of security in terms 
10 of access to the different zones of the memoryr for a 
software architecture such as the one shown in Figure 
1. 



Wffi¥PTHAT WHICH IS CLAIMED IS~: 

1. A device for access to applications of a 
chip card comprising a microprocessor associated with 
an operating system working with a set of instructions, 
a program memory and a battery of applications in a 
memory of the chip card, wherein the device comprises: 

—a register of the microprocessor to store a 
code, on several check bits, proper to an entity 
brought into play, 

—a call instruction and an instruction for 
the return of the set of instructions to 
instantaneously and automatically update the register 
during the action by a new entity, 

■ — a checking device for the checking, as a 
function of the check bits, of the authorized nature of 
the access to the zones of the memory of the chip card 
by the new entity that is called or takes action in the 
chip card, 

—a first link to transmit the check bits 
from the microprocessor to the checking device. 

2. A device for access to applications of a 
chip card according to claim 1, comprising a second 
register to store a code proper to the applications 
active at the time of the last call instruction sent. 

3. A device for access to applications of a 
chip card according to one of the claims 1 or 2, 
wherein the entity that is called or takes action in 
the chip card is an application of the battery of 
applications . 

4. A device for access to applications of a 
chip card according to one of the claims 1 or 2, 
wherein the entity is a hardware event. 



